Privacy Policy
Anbieter und Verantwortlicher
Thomas Noga
Am Weingartsberg 50
51143 Köln, Germany
E-Mail-Adresse des Anbieters: info@tom-noga.com
Type of Data Collected
The owner does not provide a detailed list of the personal data collected.
Complete details on each type of personal data processed are provided in the relevant sections of this privacy policy or, where applicable, through specific information notices displayed prior to data collection.
Personal data may be freely provided by the user or, in the case of usage data, collected automatically when this application is used.
Unless stated otherwise, all data requested by this application is mandatory. Failure to provide such data may make it impossible for this application to provide its services. In cases where this application explicitly states that the provision of personal data is optional, users are free not to provide such data without any consequences for the availability or the functionality of the service.
Users who are uncertain about which personal data is mandatory may contact the service provider.Any use of cookies — or of other tracking tools — by this application or by third-party service providers used by this application serves the purpose of providing the service requested by the user, in addition to any other purposes described in this privacy policy.
Users are responsible for any third-party personal data obtained, published, or shared through this application and confirm that they have the third party’s consent to provide such data to the service provider.
Mode and Place of Data Processing
Methods of Processing
The service provider processes users’ personal data in a proper manner and adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of data.
Data processing is carried out using computers and/or IT-enabled tools, following organizational procedures and methods strictly related to the purposes indicated. In addition to the controller, personal data may also be accessible to other persons involved in the operation of this application, either internal (such as personnel administration, sales, marketing, legal department, system administrators) or external — where necessary — appointed by the controller as data processors (such as technical service providers, postal service providers, hosting providers, IT companies, or communications agencies). An updated list of these parties may be requested from the service provider at any time.
Place
The data is processed at the service provider’s operating offices and in any other locations where the parties involved in the processing are located.
Depending on the user’s location, data transfers may involve the transfer of the user’s data to a country other than their own. To learn more about the place of processing of such transferred data, users may consult the section containing detailed information on the processing of personal data.
Data Retention
Unless otherwise specified in this document, personal data shall be processed and stored for as long as required by the purpose for which it was collected and may be retained for a longer period where necessary to comply with a legal obligation or based on the user’s consent.
Cookie Policy
This application uses trackers.
Further information regarding the use of trackers and cookies can be found in the Cookie Policy.
Further Information for Users in the European Union
Legal Basis of Processing
The service provider may process personal data relating to users only if one of the following applies:
- users have given their consent for one or more specific purposes;
- the collection of data is necessary for the performance of a contract with the user and/or for any pre-contractual obligations thereof;
- the processing is necessary for compliance with a legal obligation to which the service provider is subject;
- the processing is related to a task carried out in the public interest or in the exercise of official authority vested in the service provider;
- the processing is necessary for the purposes of the legitimate interess pursued by the service provider or by a third party.
In any case, the service provider will gladly provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a statutory or contractual obligation, or a requirement necessary for the conclusion of a contract.
Further Information on Data Retention
Unless otherwise specified in this document, personal data shall be processed and stored for as long as required by the purpose for which it was collected and may, where applicable, be retained for a longer period due to a legal obligation to be fulfilled or based on the user’s consent.
Therefore, the following applies:
- Personal data collected for purposes related to the performance of a contract concluded between the service provider and the user shall be stored until such contract has been fully performed.
- Personal data collected for the purposes of pursuing the legitimate interests of the service provider shall be retained for as long as necessary to fulfil such purposes. Users may obtain further information regarding the legitimate interests pursued by the service provider in the relevant sections of this document or by contacting the service provider.
Furthermore, the service provider is permitted to store personal data for a longer period where the user has given consent to such processing, provided that such consent has not been withdrawn. In addition, the service provider may be obliged to retain personal data for a longer period where this is required for compliance with a legal obligation or by order of an authority.
Once the retention period has expired, personal data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification, and the right to data portability cannot be exercised after the expiration of the retention period.
The Rights of Users under the General Data Protection Regulation (GDPR)
Users may exercise certain rights with regard to their personal data processed by the service provider.
Users have, to the extent permitted by law, in particular the right to do the following:Die Nutzer können bestimmte Rechte in Bezug auf ihre vom Anbieter verarbeiteten Daten ausüben.
Nutzer haben im gesetzlich zulässigen Umfang insbesondere das Recht, Folgendes zu tun:
- Withdraw their consent at any time. Where users have previously given their consent to the processing of personal data, they may withdraw such consent at any time.
- Object to the processing of their data. Users have the right to object to the processing of their data if such processing is carried out on a legal basis other than consent.
- Access their data. Users have the right to learn whether their personal data is being processed by the service provider, to obtain information about certain aspects of the processing, and to receive a copy of the data undergoing processing.
- Verify and request rectification. Users have the right to verify the accuracy of their data and to request that it be updated or corrected.
- Request restriction of processing. Users have the right to restrict the processing of their personal data. In this case, the service provider will not process the personal data for any purpose other than storage.
- Request erasure or other removal of personal data. Users have the right to request that the service provider delete their personal data.
- Receive their data and have it transferred to another controller. Users have the right to receive their personal data in a structured, commonly used, and machine-readable format and, where technically feasible, to have such data transmitted to another controller without hindrance.
- Lodge a complaint. Users have the right to lodge a complaint with the competent supervisory authority.
Users also have the right to be informed about the legal basis for data transfers to a country outside the European Union or to an international organization governed by public international law or established by two or more countries, such as the United Nations, as well as about the security measures implemented by the service provider to safeguard their data.
Details on the Right to Object to Processing
Where personal data is processed in the public interest, in the exercise of an official authority vested in the service provider, or for the purposes of the legitimate interests pursued by the service provider, users may object to such processing by providing a justification related to their particular situation.
Users are informed that they may object to the processing of their personal data for direct marketing purposes at any time, free of charge and without providing any justification. Where a user objects to the processing of personal data for direct marketing purposes, such personal data shall no longer be processed for those purposes. Whether the service provider processes personal data for direct marketing purposes may be determined by users by consulting the relevant sections of this document.
How the Rights Can Be Exercised
Any requests to exercise user rights may be directed to the owner using the contact details provided in this document.
Such requests may be submitted free of charge and will be addressed by the service provider as early as possible and, in any event, within one month. The service provider shall provide users with the information required by law.
Any rectification or erasure of personal data or restriction of processing shall be communicated by the service provider to each recipient to whom the personal data has been disclosed, if any, unless this proves impossible or involves disproportionate effort. At the user’s request, the service provider shall inform the user about such recipients.
Further Information on the Collection and Processing of Data
Legal Action
The personal data of users may be processed by the service provider for the purposes of enforcing legal claims, either within or in preparation for judicial proceedings, arising from the improper use of this application or the related services.
Users declare that they are aware that the service provider may be required to disclose personal data upon request by public authorities.
Further Information about the User’s Personal Data
In addition to the information contained in this privacy policy, this application may provide the user, upon request, with further contextual information concerning specific services or the collection and processing of personal data.usätzlich zu den in dieser Datenschutzerklärung aufgeführten Informationen kann diese Anwendung dem Nutzer auf Anfrage weitere kontextbezogene Informationen zur Verfügung stellen, die sich auf bestimmte Dienste oder auf die Erhebung und Verarbeitung personenbezogener Daten beziehen.
System Logs and Maintenance
This application and third-party services may collect files that record interactions with this application (system logs) or use other personal data (such as IP addresses) for this purpose, for operation and maintenance purposes..
Changes to This Privacy Policy
The service provider reserves the right to make changes to this privacy policy at any time by notifying users on this page and, where technically and legally feasible, within this application and/or — where possible — by sending a notice to users via any contact information available to the service provider.
Users are therefore advised to consult this page regularly, referring to the date of the last modification indicated at the bottom of the page.
Where changes affect processing activities based on the user’s consent, the service provider shall obtain new consent from the user, where required.
Definitions and Legal References
Personal Data (or Data)
Any information that directly, or in combination with other information, makes it possible to identify a natural person.
Usage Data
Information collected automatically by this application (or by third-party services employed by this application), which may include: the IP addresses or domain names of the computers used by users who use this application, the URI addresses (Uniform Resource Identifiers), the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (successful outcome, error, etc.), the country of origin, the features of the browser and operating system used by the user, the various time details per visit (e.g. the time spent on each page within the application), and details about the path followed within the application, with special reference to the sequence of pages visited, as well as other parameters about the operating system of the device and/or the user’s IT environment.
User
The individual using this application who, unless otherwise specified, coincides with the data subject.
Data Subject
The natural person to whom the personal data refers.
Data Processor (or Processor)
A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller, as described in this privacy policy.
Data Controller (or Service Provider, in some cases also Owner)
The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, including the security measures concerning the operation and use of this application. Unless otherwise specified, the data controller is the natural or legal person through whom this application is made available.
This Application
The hardware or software tool by which the user’s personal data is collected and processed.
Service
The service provided by this application, as described in the relevant terms and conditions (if available) and on this website/application.
European Union (or EU)
Sofern nicht anders angegeben, beziehen sich alle Verweise in diesem Dokument auf die Europäische Union auf alle derzeitigen Mitgliedstaaten der Europäischen Union und den Europäischen Wirtschaftsraum (EWR).
Rechtlicher Hinweis
This privacy policy applies exclusively to this application, unless otherwise stated within this document.